mbox

[scarthgap,0/8] Patch review

Message ID cover.1778198884.git.yoann.congal@smile.fr
State Not Applicable, archived
Headers show

Pull-request

https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-nut

Message

Yoann Congal May 8, 2026, 6:25 a.m. UTC 
Please review this set of changes for scarthgap and have comments back by
end of day Monday, May 11.

Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/3794

The following changes since commit 3c2f2b6f7af2bb743655859b64faae4786080cb9:

  libsoup: fix CVE-2025-32049 (2026-05-05 13:01:04 +0200)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-nut

for you to fetch changes up to 7952d214393b6c5230ba115f63b6f6d245a728bc:

  glibc: Fix recipe bug that disabled stack protector (2026-05-08 01:06:24 +0200)

----------------------------------------------------------------

Hitendra Prajapati (4):
  libarchive: fix for CVE-2026-4426
  vim: fix for CVE-2026-39881
  sudo: fix for CVE-2026-35535
  inetutils: fix for CVE-2026-32772

Ivan Nestlerode (1):
  glibc: Fix recipe bug that disabled stack protector

Moritz Haase (1):
  devtool: Disable gpg signing when setting up source tree repos

Peter Marko (1):
  coreutils: set CVE_PRODUCT

Xiangyu Chen (1):
  grub: update search parameter

 meta/recipes-bsp/grub/files/cfg               |   2 +-
 .../inetutils/inetutils/CVE-2026-32772.patch  | 172 ++++++++++++
 .../inetutils/inetutils_2.5.bb                |   1 +
 meta/recipes-core/coreutils/coreutils_9.4.bb  |   2 +
 meta/recipes-core/glibc/glibc.inc             |   3 -
 .../libarchive/libarchive/CVE-2026-4426.patch |  58 ++++
 .../libarchive/libarchive_3.7.9.bb            |   1 +
 .../sudo/files/CVE-2026-35535.patch           | 150 +++++++++++
 meta/recipes-extended/sudo/sudo_1.9.17p2.bb   |   1 +
 .../vim/files/CVE-2026-39881.patch            | 248 ++++++++++++++++++
 meta/recipes-support/vim/vim.inc              |   1 +
 scripts/lib/devtool/__init__.py               |   2 +-
 12 files changed, 636 insertions(+), 5 deletions(-)
 create mode 100644 meta/recipes-connectivity/inetutils/inetutils/CVE-2026-32772.patch
 create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2026-4426.patch
 create mode 100644 meta/recipes-extended/sudo/files/CVE-2026-35535.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-39881.patch